**Official MikroTik Hardware **

Who would have thunk, 1 click containers from mikrotik.

meh.png

Code:
#
Flags: X - DISABLED
Columns: NAME, CATEGORY, DESCRIPTION
 #   NAME              CATEGORY          DESCRIPTION                                                                                     
 0 X adventurelog      productivity      AdventureLog is a travel blog and photo journal web application                                 
 1 X babybuddy         productivity      A buddy for babies! Helps caregivers track sleep, feedings, diaper changes, and tummy time to le
                                         arn about and predict baby's needs without (as much) guess work                                 
 2 X backrest          storage           Web-based backup solution with support for local and cloud storage backends                     
 3 X caddy             networking        Caddy 2 is a powerful, enterprise-ready, open source web server with automatic HTTPS written in
                                         Go.                                                                                             
 4 X calibre-web       productivity      a clean interface for browsing, reading and downloading eBooks using an existing Calibre databas
                                         e                                                                                               
 5 X chr               networking        Cloud Hosted Router - RouterOS Virtual Machine                                                 
 6 X cinny             communication     Matrix client focusing primarily on simple, elegant and secure interface                       
 7 X cloudflared       networking        Client for Cloudflare Tunnel, a daemon that exposes private services through the Cloudflare edge
                                         .                                                                                               
 8 X code-server       development       Code-server is VS Code running on a remote server, accessible through the browser.             
 9 X conduit           communication     Conduit is a simple, fast and reliable chat server powered by [matrix]                         
10 X convertx          productivity      ConvertX is a self-hosted online file converter                                                 
11 X copyparty         file-management   turn almost any device into a file server with resumable uploads/downloads using any web browser
12 X docmost           productivity      Modern wiki and documentation platform built for teams                                         
13 X elasticsearch     search            open source, distributed search and analytics engine built for speed, scale, and AI applications
14 X element           communication     Matrix client focused on usability, accessibility, and broad compatibility                     
15 X excalidraw        productivity      Virtual whiteboard for sketching hand-drawn like diagrams                                       
16 X filegator         file-management   free, open-source, self-hosted web application for managing files and folders.                 
17 X firefox           networking        free and open-source web browser developed by the Mozilla Foundation                           
18 X forgejo           development       Forgejo is a self-hosted lightweight software forge. Easy to install and low maintenance, it jus
                                         t does the job.                                                                                 
19 X fossil            productivity      simple, high-reliability, distributed SCM (Software Configuration Management) system           
20 X frigate           video             an open source NVR built around real-time AI object detection. All processing is performed local
                                         ly on your own hardware, and your camera feeds never leave your home.                           
21 X gitea             development       Self-hosted Git service with web interface                                                     
22 X gitlab            development       git source code repository host                                                                 
23 X goaway            networking        Lightweight DNS server with web interface for ad blocking and DNS filtering                     
24 X grafana           monitoring        open source analytics and interactive visualization web application                             
25 X hedgedoc          productivity      Collaborative markdown editor with real-time collaboration                                     
26 X home-assistant    home-automation   Home automation software                                                                       
27 X immich            media             Immich is a high performance self-hosted photo and video backup solution                       
28 X influxdb          monitoring        InfluxDB is the time series data platform designed to handle high write and query workloads     
29 X jackett           media-management  API Support for your favorite torrent trackers                                                 
30 X jellyfin          media             Free and open-source media server                                                               
31 X kimai             productivity      Kimai is a free & open source timetracker designed for freelancers, agencies and companies     
32 X librenms          monitoring        autodiscovering PHP/MySQL-based network monitoring system                                       
33 X librespeed        monitoring        Free and Open Source Speed Test. No Flash, No Java, No Websocket, No ********.                 
34 X lidarr            media             Lidarr is a music collection manager for Usenet and BitTorrent users.                           
35 X mediamanager      media-management  MediaManager is modern software to manage your TV and movie library. It is designed to be a repl
                                         acement for Sonarr, Radarr, Overseer, Unpackerr and Jellyseer. It supports TVDB and TMDB for met
                                         adata, supports OIDC and OAuth 2.0 for authentication and supports Prowlarr and Jackett.       
36 X memos             productivity      A modern, open-source, self-hosted knowledge management and note-taking platform designed for pr
                                         ivacy-conscious users and organizations.                                                       
37 X minio             storage           High-performance object storage server compatible with Amazon S3                               
38 X mosquitto         messaging         Eclipse Mosquitto MQTT message broker                                                           
39 X n8n               automation        Workflow automation tool for connecting apps and services                                       
40 X netbox            monitoring        solution for modeling and documenting modern networks                                           
41 X nextcloud         file-management   Self-hosted productivity platform which provides private and secure functions for file sharing,
                                         collaborative work, and more                                                                   
42 X nocodb            database          No-code platform that turns any database into a collaborative workspace                         
43 X nodered           automation        Low-code programming for event-driven applications                                             
44 X ntfy              monitoring        ntfy lets you send push notifications to your phone or desktop via scripts from any computer, us
                                         ing simple HTTP PUT or POST requests                                                           
45 X nzbget            media             Nzbget is a usenet downloader                                                                   
46 X openwebrx         radio             a simple web-based software defined radio receiver                                             
47 X openwebui         ai                User-friendly WebUI for LLMs (formerly Ollama WebUI)                                           
48 X partdb            productivity      Part-DB is a web-based tool for organizing parts and components used in electronic circuits     
49 X pihole            networking        Network-wide Ad Blocking                                                                       
50 X plex              media             Plex organizes video, music and photos from personal media libraries and streams them to smart T
                                         Vs, streaming boxes and mobile devices                                                         
51 X prowlarr          media             Prowlarr is a indexer manager/proxy built on the popular arr .net/reactjs base stack to integrat
                                         e with your various PVR apps. Prowlarr supports both Torrent Trackers and Usenet Indexers. It in
                                         tegrates seamlessly with Sonarr, Radarr, Lidarr, and Readarr offering complete management of you
                                         r indexers with no per app Indexer setup required (we do it all).                               
52 X rabbitmq          monitoring        Open source multi-protocol messaging broker with AMQP and MQTT support                         
53 X radarr            media             Radarr is a movie collection manager for Usenet and BitTorrent users                           
54 X redlib            communication     Private front-end for Reddit written in Rust                                                   
55 X restic-server     storage           REST server for Restic backup client with support for remote backups                           
56 X roundcube         communication     Web-based IMAP email client with modern interface                                               
57 X searxng           search            Privacy-respecting, hackable metasearch engine                                                 
58 X smokeping         monitoring        SmokePing is a deluxe latency measurement tool. It can measure, store and display latency, laten
                                         cy distribution and packet loss.                                                               
59 X snipeit           monitoring        open source asset management                                                                   
60 X solr              search            open-source enterprise-search platform                                                         
61 X sonarr            media             Sonarr is a personal video recorder tailored for Usenet and BitTorrent users                   
62 X sonatype-nexus    development       single source of truth for all your internal and third-party binaries, components, packages, and
                                          AI models                                                                                     
63 X speedketchup      monitoring        Run periodic internet speed test, store, display results with builtin web server               
64 X syncthing         file-management   continuous file synchronization program. It synchronizes files between two or more computers   
65 X technitium        networking        Technitium DNS Server is an open source authoritative as well as recursive DNS server that can b
                                         e used for self hosting a DNS server for privacy & security.                                   
66 X transmission      media             BitTorrent Client                                                                               
67 X upsnap            networking        A simple wake on lan web app written with SvelteKit, Go and PocketBase                         
68 X uptime-kuma       monitoring        A self-hosted monitoring tool                                                                   
69 X urbackup-client   storage           UrBackup client for backing up data to UrBackup server                                         
70 X urbackup-server   storage           Client/Server network backup system with web interface for management                           
71 X vaultwarden       security          An alternative server implementation of the Bitwarden Client API, written in Rust and compatible
                                          with official Bitwarden clients                                                               
72 X victoria-logs     monitoring        fast, cost-effective, and easy-to-use log database by VictoriaMetrics. A simple, powerful soluti
                                         on                                                                                             
73 X victoria-metrics  monitoring        a fast, cost-effective, scalable TSDB in one easy-to-deploy binary.                             
74 X viseron           video             Self-hosted, local only NVR and AI Computer Vision software. With features such as object detect
                                         ion, motion detection, face recognition and more, it gives you the power to keep an eye on your
                                         home, office or any other place you want to monitor.                                           
75 X wallabag          productivity      Self-hosted read-it-later application                                                           
76 X warracker         productivity      Web application for tracking warranties and product information                                 
77 X webtop            productivity      Alpine based container containing XFCE desktop environment via any modern web browser.         
78 X wordpress         productivity      Content management system for websites and blogs                                               
79 X zabbix            monitoring        Enterprise-Class Open Source Network Monitoring
 
Last edited:
I just want tecnitium to run using https to quad9 nope!, pihole works very well on an nfs share technitium not so much.

Code:
 disk/test container_block
Flags: R - RUNNING
Columns: SEQ, RATE, IOPS, BYTES, DISK, THREAD, TYPE, PATTERN, DIR, BSIZE, STATE
  SEQ  RATE      IOPS  BYTES    DISK             THREAD  TYPE    PATTERN     DIR   BSIZE    STATE
  0    67.1Mbps   128  8.0MiB   container_block       0  device  sequential  read  64.0KiB       
  1    75.4Mbps   144  9.0MiB   container_block       0  device  sequential  read  64.0KiB       
  2    75.4Mbps   144  9.0MiB   container_block       0  device  sequential  read  64.0KiB       
  3    75.4Mbps   144  9.0MiB   container_block       0  device  sequential  read  64.0KiB       
  4    83.8Mbps   160  10.0MiB  container_block       0  device  sequential  read  64.0KiB       
R TOT  75.4Mbps   144  45.0MiB  container_block       0  device  sequential  read  64.0KiB  run

I'm having fun though :rolleyes:
 
What's new in 7.21.1 (2026-Jan-19 17:09):
  • bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.21);
  • bridge - improved stability when using MVRP (introduced in v7.21);
  • certificate - fixed empty trust store handling in certain cases (introduced in v7.21);
  • container - changed app auto update to be off by default;
  • container - fixed issue where containers may not start with large mounts;
  • health - fixed fan and PSU state logging for MIPSBE devices;
  • leds - fixed power LED behavior for hAP ax S;
  • lte - fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used;
  • switch - fixed switch type for hAP ax lite devices (introduced in v7.21);
  • system - fixed rare partial loss of RouterOS configuration;
 
What's new in 7.21.2 (2026-Jan-29 11:54):


  • app - added "media-path" and "download-path" setting in /app/settings;
  • app - added shm_size parameter to apps that require it;
  • app - calibre-web app auto add db if none exists;
  • app - fixed Firefox and Webtop to work with https-proxy;
  • app - fixed fossil app login typo;
  • bgp - implement revised input error handling per RFC 7606;
  • container - added support for the shm_size setting;
  • container - allow non-root user write to SMB share;
  • container - changed default container registry to docker.io;
  • container - do not mount tmpfs on /tmp and /run by default;
  • container - do not start container if any volume is not mounted;
  • container - fixed nftables/iptables not working with "Message too long" error;
  • container - made container mounts writable by the user;
  • defconf - added single port MGMT bridge on CCR/RDS for easier /app configuration;
  • defconf - improved firewall rule for local traffic to the loopback interface;
  • disk - fixed issue where mountpoint was not removed after removing the disk;
  • dns - fixed domain resolution for the ":resolve" command "server" parameter;
  • lte - fixed issue for Chateau 5G R17 ax (introduced in v7.21.1);
  • poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
  • poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
  • poe-out - fixed occasional firmware update failure on CRS354;
  • poe-out - fixed PSU state recovery upon unplug/replug on CRS320;
  • ppp - added initial support for BG770A-GL modem firmware update;
  • ppp - fixed premature PPP client disconnect on BG77 modems during firmware update;
  • route - prevent creating routing tables with the same name;
  • routing-filter - fixed num-set matcher;
  • sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS;
  • sfp - improved initialization and linking for some QSFP modules;
  • snmp - fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput;
  • snmp - fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.21);
  • snmp - fixed script "run-count" update after execution;
  • system - do not attempt to use FastPath RPS on non-ARM64 devices (introduced in v7.21);
  • user-manager - properly release database backup file after backup creation;
  • zerotier - improved route removal;
 
What's new in 7.21.3 (2026-Feb-12 15:10):


  • bridge - fixed dhcp-snooping incorrectly disabling HW offloading on QCA8337, Atheros8327 switch chips (introduced in v7.20);
  • certificate - fixed initial certificate creation using SCEP (introduced in v7.21);
  • console - improved service stability when processing files over CLI;
  • dhcpv4-server - append "s" after lease-time value in setup command;
  • gps - fixed port configuration for CubeG-5ac60ay;
  • hotspot - rename totp-secret to otp-secret;
  • ipv6 - do not invalidate router if RA without included prefix is received (introduced in v7.21);
  • ipv6 - fixed "on-link" and "autonomous" flag detection (introduced in v7.21);
  • ipv6 - invalidate router only when router lifetime expires (introduced in v7.21);
  • lte - fixed eSIM profile switching on ATL 5G R16;
  • lte - improved notification handling during firmware update for Quectel modems;
  • poe-out - firmware update for hEX PoE, OmniTIK 5 PoE ac, PowerBox Pro (the update will cause a brief power interruption to poe-out interfaces);
  • poe-out - fixed rare false overload triggers on hEX PoE, OmniTIK 5 PoE ac, PowerBox Pro;
  • sfp - fixed sfp-ignore-rx-loss parameter for hEX PoE;
 
7.22 released FYI No support for https/containers with a free CHR registered on not!

Code:
What's new in 7.22 (2026-Mar-09 10:38):
 
!) certificate - added support for multiple ACME certificates (services that use a previously generated certificate need to be reconfigured after the certificate expires);
!) device-mode - added option to configure device-mode via Netinstall or FlashFig using a “mode script”;
*) app - added configurable app-store URL for custom apps;
*) app - added health check for apps, which automatically rewrites the composed YAML;
*) app - added jupyter-notebook, livebook, myip, and rustfs apps;
*) app - added support for custom apps;
*) app - allow configuring bridge port pvid for app;
*) app - changed ui-url parameter for Smokeping and Nextcloud;
*) app - clean the backup directory after container repull;
*) app - do not show duplicate entries of required-mounts;
*) app - enable swap on all devices that use apps to help with performance;
*) app - fixed /app/export;
*) app - fixed apps constantly polling the cloud;
*) app - fixed elasticsearch, element, pmacct-netflow apps failing to start;
*) app - fixed issue with Cinny not being able to create a root-dir;
*) app - fixed missing reverse-proxy URL;
*) app - fixed potential port collisions between apps;
*) app - show app URL only when it is running;
*) app - show DNS URL for app only if it has a reverse-proxy;
*) bgp - added BGP unnumbered support;
*) bgp - changed multipath to number argument;
*) bgp - fixed BGP output sometimes not being cleaned after session restart;
*) bgp - fixed early-cut not working properly;
*) bgp - fixed ignore-as-path-len not being used;
*) bgp - fixed update messages not being sent on default-prepend value change;
*) bgp - implemented add-path;
*) bgp - implemented multipath (ability for BGP best path to select ECMP routes);
*) bgp - make remote.address parameter optional;
*) bgp-vpn - allow modifying scopes with routing filters;
*) bgp-vpn - use target scope for imported route;
*) bridge - added local and static MAC synchronization for MLAG;
*) bridge - added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss);
*) bridge - added MLAG-specific aged and aged-peer flags to host table;
*) bridge - added RA guard feature;
*) bridge - fixed MAC moving between regular ports and bonds for MLAG;
*) bridge - fixed MLAG state being permanently disabled when changing bridge interface settings;
*) bridge - fixed performance regression in complex setups with vlan-filtering (introduced in v7.20);
*) bridge - improved logic for interface remove;
*) bridge - improved MAC synchronization for MLAG;
*) bridge - improved VRRP MAC address handling;
*) bridge - removed vlan-filtering check when changing the MVRP setting (allows disabling MVRP through WinBox);
*) bth - use separate Let's Encrypt certificate for file-share;
*) certificate - improved certificate export process;
*) certificate - improved logging;
*) chr - improved fast-path stability when using vmxnet3 driver;
*) console - added :continue and :break commands for various loops;
*) console - added :exit command to terminate scripts;
*) console - added "comments" parameter to print command to control comment and error output;
*) console - added comparison operators for ID values;
*) console - added Ctrl+Left/Right word navigation;
*) console - added Ctrl+w word deletion;
*) console - added hint for dry-run import parameter;
*) console - added left shift (<<) and right shift (>>) support for IPv6 addresses;
*) console - added on-event script runner support to print follow/follow-only;
*) console - added timestamp support to print follow/follow-only;
*) console - allow undefined variables in dry-run import;
*) console - changed autocomplete expansion criteria;
*) console - disable follow command in /ip/firewall/connection menu;
*) console - fixed brief print for entries with multiple comments;
*) console - fixed setting of /interface/wireless/scan-list;
*) console - fixed time drift for interface last-link-down-time and last-link-up-time;
*) console - fixed value type names in comparison errors;
*) console - implemented string casting in :tobool command;
*) console - improved command decoding to drop extraneous commands (visible in history logging);
*) console - improved error tracing when using find command;
*) console - improved export command to avoid empty [find];
*) console - improved history logging when performing object rename with set/reset;
*) console - improved set/remove command handling in /file menu;
*) console - look up variable in global scope if argument scope lookup failed;
*) console - parse width parameter for non-interactive SSH commands;
*) console - show smaller QR codes where possible;
*) console - use the same flag output format for both print brief and detail;
*) container - added support for zstd extraction;
*) container - automatically stop/repull/start the container on repull or remote-image change;
*) container - fixed issue where the container may not start after upgrading if root-dir was not set;
*) container - improved error message if container fails to start;
*) container - internal stability improvements;
*) container - use the user-defined envs and envlist for container shell command;
*) defconf - fixed L009 configuration (introduced in v7.21);
*) detnet - added request-interval setting;
*) detnet - changed default port from MNDP to a random unused UDP port;
*) dhcp-server - improved failure/error logging for both IPv4 and IPv6;
*) dhcpv4-client - fixed inability to reference disabled DHCP client by interface name;
*) dhcpv4-client - request DOMAINNAME (15) option from the server;
*) dhcpv4-server - improved DHCP option handling;
*) dhcpv4-server - improved logging;
*) dhcpv4-server - send all found lease options in reply to DHCPINFORM;
*) dhcpv6-client - allow unsetting "pool-prefix-length" parameter;
*) dhcpv6-client - improved log messages;
*) dhcpv6-relay - fixed link-layer address inconsistency with the original link-layer address in relay-forward packets;
*) dhcpv6-server - swap input and output RADIUS accounting statistics counters;
*) disk - added support for file-based swap space;
*) disk - added trim command which functions similarly to fstrim;
*) disk - fixed issue where iSCSI did not work with ESXi and XEN hypervisors;
*) disk - fixed issue with disks not mounting after swapping devices;
*) disk - fixed opening a drive in read-only mode if it became locked;
*) disk - improved BTRFS stability on TILE devices;
*) disk - renamed format file-system=trim and trim-secure to format file-system=discard and discard-secure;
*) disk - show if drive is encrypted and locked;
*) email - use default port if not specified;
*) ethernet - increased Rx buffer size for devices with Alpine CPUs (reduces packet rx-drop in certain cases);
*) fetch - added HTTP/2 support on ARM64 and x86/CHR devices;
*) fetch - fixed fetch treating relative paths from redirects as hostnames;
*) fetch - increased default maximum redirect count to 2;
*) fetch - return error code and HTTP headers to :onerror script;
*) fetch - treat HTTP 304 return code as success;
*) gps - fixed GPS port disappearance after reboot for EC25-EU&KNe;
*) health - added CPU temperature monitoring to L009 with ARM64;
*) hotspot - allow WireGuard interface type;
*) hotspot - check validity of base32 for otp-secret;
*) hotspot - do not invalidate static ARP entries;
*) hotspot - fixed www response after login by cookie;
*) hotspot - set sensitive flag on /ip/hotspot/user otp-secret;
*) ike1 - added ChaCha20-Poly1305 ESP encryption support;
*) ike1,ike2 - improved netlink update handling;
*) iot - added Bluetooth extended scanning and 1M/2M PHY support for the RB924i KNOT devices;
*) iot - added Bluetooth extended scanning, advertising, and 1M/2M/CODED PHY support for EC25 KNOT devices;
*) iot - added modbus delay using interframe-gap setting;
*) iot - improved LoRa FSK modulation downlinking;
*) ip - added error messages to reverse-proxy rules;
*) ip - added reverse-proxy;
*) ip-service - properly disable IP/Service on manual disable;
*) ippool6 - allow creating sub-pool by specifying "from-pool";
*) ipsec - added "none" option to IPsec key QKD certificate field;
*) ipsec - added IKEv2 DDoS cookie activation setting;
*) ipsec - added logging for IPsec policy template group;
*) ipsec - added logging of IKEv2 connection SPI and initiator address;
*) ipsec - adjusted minimum generated PSK key length;
*) ipsec - fixed IKEv2 child policy reqid lost on rekey;
*) ipsec - fixed IKEv2 child reqid handling on traffic selector update;
*) ipsec - improved aes256-ctr stability on L009;
*) ipsec - removed modp8192 proposal on MIPS architectures;
*) ipv6 - added dhcp6-pd-preferred to /ipv6/nd/prefix to control P flag in Prefix Info Option RFC 9762;
*) ipv6 - delete SLAAC default route if there are no active SLAAC prefixes present and no new RAs received;
*) ipv6 - do not generate duplicate dynamic link-local addresses on tunnel type interfaces;
*) ipv6 - enable IPv6 fast-path after removing firewall rules;
*) ipv6 - improved system stability when manipulating IPv6 configuration that was added while IPv6 was disabled;
*) isis - improved stability and fixed a small memory leak;
*) l2tp - improved system stability on TILE architecture;
*) l3hw - fixed missing VLAN counters on reboot (introduced in v7.21);
*) l3hw - improved system stability on device shutdown/reboot;
*) l3hw - improved system stability when enabling VLAN offloading under active traffic (introduced in v7.21);
*) log - added comment support to rule entries;
*) log - added option to clear echo logs;
*) log - added option to prepend topics to BSD syslog message;
*) log - added script target for log actions;
*) log - fixed incorrect log message shown after canceling supout.rif creation;
*) log - fixed minor spelling issues;
*) log - fixed missing ID in trace logs after removing logging rule;
*) log - log "Secret must be set to run scripts from SMS" error only if ":cmd" prefix is used in SMS message;
*) log - use uppercase MAC address in firewall logging;
*) lte - added "auto" MTU option for LTE interfaces to use network-advertised MTU on supported devices;
*) lte - added AT command timeout for EC25-EU&KNe;
*) lte - added multi-apn and framed routing support for EC200A-EU modem (requires latest FW version);
*) lte - added roaming barring field to LTE "show-capabilities" menu;
*) lte - added subscriber number to monitor command for MBIM modems;
*) lte - added USB tethering support using iOS devices;
*) lte - clear about field status on firmware upgrade;
*) lte - do not allow modem firmware-upgrade on "inactive" interface;
*) lte - do not allow setting unsupported roaming barring settings for R11e-4G;
*) lte - do not flap LTE passthrough assigned interface on modem link state change;
*) lte - do not reconfigure LTE interface on configuration change error;
*) lte - enable DHCP relay packet forwarding to the cellular network for EG120K-EA and RG650E-AU;
*) lte - fixed "allow-roaming" setting to return error for modems that do not support roaming barring;
*) lte - fixed cases where AT dialer could get stuck in "modem not ready" state;
*) lte - fixed cases where incorrect network modes and bands could be suggested for active interface;
*) lte - fixed chained firmware update for Chateau 5G;
*) lte - fixed changing eSIM profile nickname;
*) lte - fixed changing MAC address for EC200A-EU modem;
*) lte - fixed crash on LTE passthrough interface deactivation;
*) lte - fixed displaying operator name for Chateau ax R17;
*) lte - fixed eSIM errors appearing on devices without eSIM support;
*) lte - fixed firmware update and status refresh for R11eL-EC200A-EU modem;
*) lte - fixed LTE interface IPv6 address generation to use EUI-64 for EC25-EU&KNe;
*) lte - fixed missing notifications to eSIM provider when eSIM provisioning canceled;
*) lte - fixed tethering support for Google Pixel Pro 8;
*) lte - fixed wrong MTU reading/setting for config-less modems;
*) lte - hide external antenna selection menu for the Chateau AX R17;
*) lte - improved APN IP type handling by enabling only the IP protocols defined in the assigned APN profile for config-less modems;
*) lte - make inactive LTE interface settable, LTE interface settings can be set without waiting for modem initial initialization;
*) lte - removed delay before querying modem status for config-less modems with info channel;
*) lte - show ICCID and IMSI also when the interface is disabled;
*) lte - strip modem reported padding characters for SIM card (ICCID) on Chateau ax R17;
*) mac-telnet - added interface property;
*) macsec - fixed hardware offload on S53 and C53 devices;
*) mesh - fixed missing S flag on interfaces after mesh disable/enable;
*) ospf - fixed typos in log messages;
*) ping - added IPv6 support for flood-ping;
*) poe-out - added LLDP support for dual-signature PDs;
*) poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - firmware update for CRS354-48P-4S+2Q+ (the update will cause a brief power interruption to poe-out interfaces);
*) poe-out - fixed controller-error for CRS354-48P-4S+2Q+;
*) port - fixed baud rate change for TILE architecture devices;
*) ppp - added initial support for BG770A-GL modem firmware update;
*) ppp - fixed Framed-Route attribute not being applied to correct VRF;
*) profiler - split "management" process into different smaller process groups;
*) radius - fixed initialization of incoming UDP socket in some situations;
*) radius - fixed RadSec SSL CPU usage increase on closed connections;
*) radius - improved incoming RadSec packet processing on busy service;
*) radius - improved logging;
*) rip,pimsm - separate the interface property from the address in /routing/rip/interface and /routing/pimsm/interface menus;
*) rose-storage - added XFS support;
*) route - added logs for check-gateway state changes;
*) route - added routing/settings policy-rules;
*) route - added SLAAC route redistribution for IPv6 capable routing protocols;
*) route - do not set blackhole flag for synthetic routes;
*) route - fixed route removal after unexpected safe mode termination;
*) route - fixed routes when scope was less than 10;
*) routerboard - allow changing /system/routerboard/settings via Netinstall or FlashFig using a "mode script";
*) routerboot - allow installing ARM64 on L009 device ("/system routerboard upgrade" required; configure "/system/routerboard/settings set preferred-architecture=arm64 boot-device=try-ethernet-once-then-nand"; start Netinstall with ARM64 image and reboot the device (DO NOT load the backup routerboot with reset button); downgrading to older versions must be avoided);
*) routerboot - fixed linking to 1000M-half for KNOT Embedded LTE4 ("/system routerboard upgrade" required);
*) routerboot - fixed possible Netinstall failure for KNOT Embedded LTE4 ("/system routerboard upgrade" required);
*) routing-filter - added possibility to match SLAAC and bgp-mpls-vpn route types;
*) sfp - improved initialization and linking for some QSFP modules;
*) smips - reduced package size and removed ip-scan, mac-scan, ping-speed, flood-ping features;
*) snmp - added 5G NSA connection signal indications: nr-rsrp, nr-rsrq, nr-sinr;
*) snmp - fixed CA band indication;
*) snmp - fixed issue where bulk walk might skip the first OID;
*) snmp - fixed minor memory leak when changing SNMP authentication/encryption passwords;
*) snmp - fixed reply for empty snmpbulkwalk requests;
*) snmp - report maximum "ifSpeed" value if out of bounds;
*) snmp - report RouterOS version in SNMPv2-MIB::sysDescr;
*) ssh - improved logging;
*) supout - wait up to 5 minutes for export to complete and show incomplete output in case of timeout;
*) switch - fixed missing switch-cpu port counters;
*) switch - improved system stability when changing bridge multicast-router property on CRS1xx/2xx (introduced in v7.19);
*) switch - updated switch-marvell.npk driver;
*) system - added reset-configuration keep-apps=yes;
*) system - display serial ports in the /system/resource/hardware menu;
*) system - improved upgrade service stability when the server is unreachable;
*) undo - show user when configuring DHCP server or hotspot with setup command;
*) upgrade - added "password" parameter to "local-upgrade" feature when configuring through CLI;
*) upgrade - added IPv6 support for local package source and mirror;
*) upgrade - fixed local package mirror check interval;
*) upgrade - removed redundant commands from local package menu;
*) usb - updated device ids for ax88179_178a driver;
*) user - properly apply login delay (introduced in v7.20);
*) user-manager - added support for NAS-Identifier attribute;
*) user-manager - always respond to accounting requests;
*) user-manager - do not send Disconnect-Message for unknown usernames for Accounting-Request;
*) user-manager - do not send invalid NAS-Port-Type on CoA/PoD messages;
*) user-manager - fixed unauthenticated access to /PRIVATE/ userman web files;
*) user-manager - show empty value for session NAS-IP-Address if empty;
*) webfig - added missing icons for Firewall table;
*) webfig - added new section "Common names" in skin designer;
*) webfig - added support for collapsible tree view for menus like Interfaces, Files, Queues;
*) webfig - added support for URL fields;
*) webfig - fixed ability to set interworking.realms-raw WiFi interface attribute;
*) webfig - fixed skin designer mobile view for QuickSet and Terminal;
*) webfig - fixed Torch Filters default values;
*) webfig - improved address type field input value validation;
*) wifi - added keepalive message in CAPsMAN data channel;
*) wifi - added optional show-frame=radiotap parameter value to make sniffer display the radiotap header of captured frames;
*) wifi - allow specifying hostname to caps-man-addresses;
*) wifi - fixed channel switching for MediaTek access points;
*) wifi - fixed FT support with wpa2-psk-sha2;
*) wifi - fixed functionality of the wireless-signal-strength LED trigger;
*) wifi - fixed possible certificate failure after CAPsMAN disable/enable;
*) wifi - improved spectral-history width for console;
*) wifi - improved stability and fixed multiple issues;
*) wifi - improved stability of interfaces in station mode during roaming;
*) wifi - improved support for 802.11be access points;
*) wifi - improved system stability when using spectral-scan;
*) wifi - introduced /interface/wifi/network menu for higher level network configuration (CLI only);
*) wifi - quicker re-connections to APs for interfaces in station mode;
*) wifi - updated regulatory information for Malaysia;
*) wifi-mediatek - fixed rx chains functionality;
*) wifi-mediatek - updated driver and firmware;
*) winbox - added "Force Check" for local upgrade;
*) winbox - added comment in "System/Ports/Remote Access" menu;
*) winbox - added confirmation message to Format Drive;
*) winbox - added Container Repull command;
*) winbox - added error reporting to CAPsMAN Manager menu;
*) winbox - added GUI support for IPsec QDK;
*) winbox - added missing LoRa channel fields;
*) winbox - added missing route flags;
*) winbox - added route ISIS tab;
*) winbox - added socsify icon for firewall NAT rules;
*) winbox - added SwOS Allow From field;
*) winbox - added warning when changing global script variables;
*) winbox - allow using specified skin without the sensitive policy;
*) winbox - fixed applying a skin to a user authenticated with RADIUS;
*) winbox - fixed applying a skin to WinBox if it was uploaded via the branding package;
*) winbox - fixed default flag in certain menus;
*) winbox - fixed empty "Realm Raw" value processing and value inheritance from configuration template (requires WinBox 4);
*) winbox - fixed L3HW default value for VLAN interface (introduced in v7.21);
*) winbox - fixed modem firmware-upgrade for the RG650E-EU modem;
*) winbox - fixed the "New QoS Profile" field for switch rules;
*) winbox - make File Share URL field clickable;
*) winbox - move "Default" panel from "IPv6/ND/Proxy" to "IPv6/ND/Prefixes";
*) winbox - rearrange filter wizard parameters in tabs;
*) winbox - recognize imported certificate key size;
*) winbox - rename "Change Now" to "Change" button in "System/Password" menu;
*) winbox - replace "DHCP" with "DHCPv6" in IPv6 menus;
*) winbox - set "Mount Filesystem" by default under "System/Disk" menu;
*) winbox - show MPLS tab only to relevant routes;
*) winbox - show separator after "Protocol" field for IPv6 Firewall rules;
*) winbox - show warnings in "MPLS/Traffic Eng/Tunnel" menu;
*) winbox - updated some setting and title names;
*) winbox - updated various WiFi properties;
*) wireguard - fixed private key generation when creating a WireGuard interface;
*) wireguard - improved stability;
*) wireguard - merged upstream fixes and improvements;
*) wireless - avoid joining BSS that previously failed until all other options tried;
*) wireless - improved system stability when changing nstreme mode;
*) wireless - improved system stability when eap-method=passthrough configured for station;
*) x86 - added JME network driver;
*) x86 - fixed interface hang on RTL8125 when processing IP-fragmented UDP traffic;
*) x86 - improved link establishing on Intel X710 series NIC;
 
Last edited:
Was waiting for that to move to stable. I now have a £150 router handling wire-speed gigabit fibre through PPPoE using jumbo frames, taking IPv6 addresses through prefix delegation and then re-delegating a small portion to a downstream router.

From looking at my other options I think VyOS might have been able to achieve this, *sense probably can but that's a more full-featured distribution rather than something focused on routing, OpenWrt looks like it supports it but you have to write the config in lots of different modules. I don't think Unifi gateways can do prefix delegation to downstream devices, and they don't support baby jumbo frames yet without doing custom config work.

Just need them to refresh their fairly old CCR range now, the RDS frontend without the storage stuff would probably be ideal - just want a handful of SFP+ and 2.5Gb interfaces.
 
Last edited:
Erm, it's a mess,,,,

Code:
 2026-03-18 08:26:26 dns,error DoH server connection error: The user callback function failed
 2026-03-18 08:51:32 dns,error DoH server connection error: The user callback function failed
 2026-03-18 09:28:13 dns,error DoH server connection error: The user callback function failed
 2026-03-18 10:03:57 dns,error DoH server connection error: The user callback function failed
 2026-03-18 10:18:09 dns,error DoH server connection error: The user callback function failed
 2026-03-18 12:43:13 dns,error DoH server connection error: The user callback function failed
 2026-03-18 13:06:12 dns,error DoH server connection error: The user callback function failed
 2026-03-18 13:52:52 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:44:53 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:47:58 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:50:57 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:51:52 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:58:45 dns,error DoH server connection error: The user callback function failed
 2026-03-18 16:01:00 dns,error DoH server connection error: The user callback function failed
 2026-03-18 16:04:58 dns,error DoH server connection error: The user callback function failed
HTTP/2 ssld nope!
 
Erm, it's a mess,,,,

Code:
 2026-03-18 08:26:26 dns,error DoH server connection error: The user callback function failed
 2026-03-18 08:51:32 dns,error DoH server connection error: The user callback function failed
 2026-03-18 09:28:13 dns,error DoH server connection error: The user callback function failed
 2026-03-18 10:03:57 dns,error DoH server connection error: The user callback function failed
 2026-03-18 10:18:09 dns,error DoH server connection error: The user callback function failed
 2026-03-18 12:43:13 dns,error DoH server connection error: The user callback function failed
 2026-03-18 13:06:12 dns,error DoH server connection error: The user callback function failed
 2026-03-18 13:52:52 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:44:53 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:47:58 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:50:57 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:51:52 dns,error DoH server connection error: The user callback function failed
 2026-03-18 15:58:45 dns,error DoH server connection error: The user callback function failed
 2026-03-18 16:01:00 dns,error DoH server connection error: The user callback function failed
 2026-03-18 16:04:58 dns,error DoH server connection error: The user callback function failed
HTTP/2 ssld nope!
Beta :D
Appreciate you guinea pigging it though for the rest of us.
 
Back
Top Bottom